I'm working with a client that has MPLS, a Cisco router and a Sophos XG. They plan to get rid of the MPLS at some point but for now it has to work. Site B got a Sophos XG firewall and we can get MPLS working using SD-WAN Routing and LAN devices (SiteB) are able to reach the LAN devices (SiteA) however the reverse is not true. SiteA cannot reach SiteB. The MPLS is configured as WAN for it to work as SD-WAN, I tried just having it as LAN with a route but it wouldn't work at all. I also tried setting a rule WAN to LAN - Any coming from the remote network to local and that isn't working either. At this moment I have no idea how to get the incoming traffic to come in from siteA to siteB.
SiteA MPLS Port (Cisco)
192.168.99.1 (their LAN is 192.168.99.0/24)
SiteB MPLS Port (XG135)
Interface IP: 192.168.99.2
WAN, set us backup in WAN link manager
SD-WAN Routing:
-Incoming interface: 192.168.100.1 (LAN1 interface on 192.168.100.0/24 network)
-Destination: 192.168.99.0/24
-Primary Gateway: MPLS Port 192.168.99.2
Rules:
-Default LAN to WAN rule: allow all
So this gets me to communicate from SiteB to SiteA but not the reverse. As mentioned I tried adding a WAN to LAN rule allowing access from the 192.168.99.0/24 network and it is not enough. What do you guys do to get incoming traffic working on MPLS & SD-Wan routing? Any help is greatly appreciated.
This thread was automatically locked due to age.